[ previous ] [ next ] [ threads ]
 From:  "Chris Buechler" <cbuechler at gmail dot com>
 Cc:  "m0n0wall dash dev at lists dot m0n0 dot ch" <m0n0wall dash dev at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall-dev] TrafficShaping + NAT
 Date:  Sun, 17 Dec 2006 15:37:54 -0500
On 12/17/06, Chris Andrist <chris at yeahmon dot net> wrote:
> I currently use traffic shaping and NAT with m0n0wall. I am currently
> using 1.23b1, because it was causing problems when multiple computers
> were using the internet. For one on my wife's laptop it would not even
> connect to the apple software update.
>  I know that the beta website says "a rather intrusive kernel patch
> was required to make concurrent traffic shaping + NAT on the   WAN
> interface possible; if you rely on this feature, please test it well
> and report any problems"

There are no known issues with 1.2x, and none of this applies to that
series.  Any connectivity issues you're having with 1.2x aren't issues
with the system, if you're having problems there must be something
wrong with your particular setup.  As to what that might be, without a
lot more information about your setup it's impossible to say.

As for this particular issue, it only affects inbound NAT (if you open
ports on your WAN into hosts on internal networks), and the problem it
causes is that the inbound traffic just disappears.  It has no effect
on outbound traffic.  As for what tests would be appropriate, just
making sure inbound NAT works when using traffic shaping would
suffice.  The other potential issue is kernel panics, which will be
apparent eventually if that's an issue.